Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ESoOanOemWaXIdUpJ0dGHUrH_eI.roa
File: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (raw, json)
Hash identifier: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=
Subject key identifier: 11:2A:0E:6A:73:9E:99:66:97:21:D5:29:27:47:46:1D:4A:C7:FD:E2
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B651B6B2482B4E28897D56F2E8D48D
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ESoOanOemWaXIdUpJ0dGHUrH_eI.roa
Signing time: Thu 02 Jan 2025 15:50:47 +0000
ROA not before: Thu 02 Jan 2025 15:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397516
IP address blocks: 2a01:488:bb0f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:51:b6:b2:48:2b:4e:28:89:7d:56:f2:e8:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=112a0e6a739e99669721d5292747461d4ac7fde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:06:de:cb:19:13:53:af:81:9e:e0:42:53:0d:
cb:c6:29:9c:f9:ac:39:49:34:be:67:b3:f2:7e:fc:
4a:23:26:46:76:2c:97:91:fc:a4:be:81:0d:d9:d9:
c9:70:bc:38:27:1c:71:0a:53:5b:8f:6f:ae:cf:1c:
ba:5b:f7:fa:12:93:45:50:af:8d:65:2f:75:28:cf:
9f:1c:db:da:ba:ca:41:36:cb:69:ab:af:2c:97:72:
8b:27:4e:ec:63:f9:ef:01:31:2e:e0:1f:97:91:61:
dc:7b:17:5f:d9:56:ab:c6:89:15:c3:89:fb:af:06:
f2:3a:e0:10:80:37:5a:b1:3b:f4:6d:c3:8b:bd:c9:
2c:de:ef:72:c7:cc:80:10:8d:dd:73:da:ee:6c:02:
cb:31:67:e6:c6:74:11:9d:b3:8b:43:33:08:df:28:
1a:02:cb:a2:ce:fa:36:a6:48:a4:bf:ba:2a:1a:9a:
26:54:fa:49:60:c2:47:65:52:78:7c:5e:70:f2:06:
fb:0a:28:00:61:6f:ea:4e:e4:a1:10:bc:bf:e9:af:
08:bd:b0:5c:5c:21:d9:96:29:ca:95:52:7c:b5:ea:
05:79:59:e2:1f:ec:71:dc:72:77:fd:40:3c:08:a4:
5f:24:ec:81:e0:82:c6:a5:81:d1:0c:76:d1:d2:5c:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2A:0E:6A:73:9E:99:66:97:21:D5:29:27:47:46:1D:4A:C7:FD:E2
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/ESoOanOemWaXIdUpJ0dGHUrH_eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb0f::/48
Signature Algorithm: sha256WithRSAEncryption
12:62:62:a7:d1:75:46:b7:ec:84:0f:3c:4d:54:2b:03:e8:cd:
77:40:21:2a:75:fd:41:5b:35:52:eb:47:0c:e6:fd:e8:59:d0:
56:4b:3d:45:f3:fc:59:7e:90:23:01:1d:2d:24:bf:2e:ea:a2:
86:a8:9e:f5:26:89:6f:a8:f2:d2:2f:80:d0:58:8d:67:39:9e:
db:9a:4a:d7:ef:57:4c:a5:60:b0:08:1f:13:19:51:f6:1e:98:
de:5e:2e:09:51:dd:f0:5a:17:71:85:43:69:6b:6d:db:32:df:
25:fd:3f:2b:1c:35:84:f5:98:6a:67:cc:ef:96:6b:2d:19:e6:
36:fa:e0:b4:1c:60:62:00:99:30:9a:aa:4d:2e:5f:8a:d6:bf:
fc:2d:9a:31:98:72:4f:5b:95:40:ae:96:02:13:a6:af:ce:27:
e9:6e:f5:41:85:c3:4a:cd:cd:c9:b6:87:71:21:4d:bd:19:96:
bf:84:06:3f:64:71:a3:67:4a:d3:9f:a0:b1:0a:75:16:e9:59:
97:da:80:fe:07:06:a9:17:28:23:11:92:05:b5:f8:4d:77:a3:
9d:f5:c7:26:4d:78:45:47:f4:a7:0a:50:76:1c:6a:4a:2b:d6:
3f:88:a8:9c:02:b4:92:af:df:c6:17:aa:e9:ed:a5:1f:98:64:
4f:96:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:33 2025 by rpki-client